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outline the general characteristics of data repositories, including requirements and data 
model features. Then we build an experimental prototype system to test two candidate 
repositories: X.500 and APS (Andrew File System). Performance an ... 
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Designing and developing new aircraft systems Is time-consuming and expensive. 
Computational simulation is a promising means for reducing design cycle times, but requires 
a flexible software environment capable of integrating advanced multidisciplinary and 
multifidelity analysis methods, dynamically managing data across heterogeneous computing 
platforms, and distributing computationally complex tasks. Web-based simulation, with Its 
emphasis on collaborative composition of simulation models, ... 
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The goal of policy-based nnanagement is to reduce the complex administration of networks. 
Copyright © 1999 John Wiley & Sons, Ltd. 
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Today, organizations deal with an ever-increasing number of documents that have to be 
archived because they are either related to their core business (e.g., product designs) or 
needed to meet corporate or legal retention requirements (e.g., voucher). In this paper, we 
present the architecture and prototype implementation of SaveMe, a document archival 
system that is based on network-centric groupware such as Internet standards-based 
messaging systems. In SaveMe, the actions of archiving, retriev ... 

Keywords: Internet, archiving, groupware, messaging 
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Application development for high-performance distributed computing systems, or 
computational grids as they are sometimes called, requires ' 'grid-enabled" tools that hide 
mundane aspects of the heterogeneous grid environment without compromising 
performance. As part of an investigation of these issues, we have developed MPICH-G, a 
grid-enabled implementation of the Message Passing Interface (MPI) that allows a user to 
run MPI programs across multiple computers at different sites using the same co ... 
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The quantitative results presented in our SIGCOI^I^ '97 paper [1] include numerous nninor 
errors. These errors were caused by programming bugs that led to faulty analyses and 
simulations, and by inaccurate transcriptions during the preparation of the paper. Here we 
present corrected figures and tables, as well as corrections to values that appeared in the 
text of the original paper. The effect of correcting the errors is to reduce the differences 
between the results based on the proxy trace and tho ... 
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A case for data-driven testing 

Tony Greening, Glenn Stevens, David Stratton 

July 2000 ACM SIGCSE Bulletin , Proceedings of the 5th annual SIGCSE/SIGCUE 
ITiCSEconference on Innovation and technology in computer science 

education, volume 32 issue 3 
Full text available: '^.pdf(405,3J.. KB). Additional Information: fujl.cjtatjpn, abstract, references, jndex terms 

This paper describes a novel approach to the on-line assessment of large groups of 
students, in which it may be desirable to maintain common questions between the groups. 
It is clear from the literature that computer based assessment has the potential to 
dramatically reduce the effort involved in testing and marking however problems arise 
where the cohort of students is larger than the number of available computers. However, 
the opposite situation is often true in practice, due to the perceived ... 
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October 2000 Proceedings of the 28th annual ACM SIGUCCS conference on User 
services: Building the future 
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November 2000 Proceedings of the 2000 ACM workshops on Multimedia 

Additional Information: fuJJ. citation, abstract, references, citings, index 



Full text available: m\ pdf(455.31 KB) 

^ terms 

Digital certificates form a basis that allows entitles to trust each other. Due to different 
constraints, a certificate is only valid within a specific period of time. Coming from several 
threats, there are important reasons why its validity must be terminated sooner than 
assigned and thus, the certificate needs to be revoked. This paper provides a classification 
of revocation methods and gives an overview of the main methods like CRL, CRS, CRT, and 
OCSP. If and in which way a revocation meth ... 

Keywords: CRL, CRS, CRT, OCSP, X.509, attribute certificate, digital certificate, public-key 
certificate, revocation 
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2 Password hardening based on keystroke dynannics 
Fabian Monrose, Michael K. Reiter, Susanne Wetzel 

November 1999 Proceedings of the 6th ACM conference on Computer and 
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,- MA a •. u. dspi ^^/h ^/lr.\ Additional Ipformation: full citatlon, abstract, references, cltlngs, Indsx 

Full text available: pdfd.OI MB) ' ^ 

^'^■^^^'^ ^ terms 

We present a novel approach to Improving the security of passwords. In our approach; the 
legitimate user's typing patterns (e.g., durations of keystrokes, and latencies between 
keystrokes) are combined with the user's password to generate a hardened password that is 
convincingly more secure than conventional passwords against both online and offline 
attackers. In addition, our scheme automatically adapts to gradual changes in a user's 
typing patterns while maintaining the s ... 
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Bruce Schneier, Mudge 

November 1998 Proceedings of the 5th ACM conference on Computer and 
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5 Public-key cr^^^ 

Shai Halevi, Hugo Krawczyk 

August 1999 ACM Transactions on Information and System Security (TISSEC), volume 2 

Issue 3 

Full text available "R pdf(275 84 KB) Additional Information: full citation, abstract, references, dtin^s, index 
^ terms, review 

We study protocols for strong authentication and key exchange in asymmetric scenarios 
where the authentication server possesses '^a pair of private and public keys while the client 
has only a weak human-memorizable password as its authentication key. We present and 
analyze several simple password authentication protocols in this scenario, and show that the 
security of these protocols can be formally proven based on standard cryptographic 
assumptions. Remarkably, our analysis shows optimal re ... 

Keywords: dictionary attacks, hand-held certificates, key exchange, passwords, public 
passwords, public-key protocols 
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I- Mi ^ I ui iTO ^f/^AA on iyri\ Additional Information! full cItation, abstrBCt, roferences, citings, index 

Full text available: Wi pdf(141 .89 KB) ' —-.- a-, 

^ terms , review 

The important problem of user password selection is addressed and a new proactive 
password-checking technique is presented. In a training phase, a decision tree is generated 
based on a given dictionary of weak passwords. Then, the decision tree is used to determine 
whether a user password should be accepted. Experimental results described here show that 
the method leads to a very high dictionary compression (up to 1000 to 1) with low error 
rates (of the order of 1%). A prototype implementat ... 

Keywords: access control, decision trees, password selection, proactive password checl<ing 
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June 1989 Communications of the ACM, volume 32 issue 6 

Additional Information: fuJJ.citatjpn, abstract, references, citings, index 



Fulltextavailable:"S|pdf(1.18 MB) 

^ terms , review 

Last November the Internet was Infected with a worm program that eventually spread to 
thousands of machines, disrupting normal activities and Internet connectivity for many 
days. The following article examines just how this worm operated. 
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^ ^bert Morris, Ken Thompson 

November 1979 Communications of the ACM, volume 22 issue 11 
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Full text available: ■^p„df(M§-M-KBJ Additional Information: fuJJ„citation, abstract, references, citings 

This paper describes the history of the design of the password security scheme on a 
remotely accessed time-sharing system. The present design was the result of countering 
observed attempts to penetrate the system. The result is a compromise between extreme 
security and ease of use. 

Keywords: computer security, operating systems, passwords 
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she Lamport 

bvember 1981 Communications of the ACM, Volume 24 issue ii 

Additional Information: full citation, abstract , references , citings . Index 



Full text available: m pdf(303.52 KB). 

terms 

A method of user password authentication is described which is secure even if an intruder 
can read the system's data, and can tamper with or eavesdrop on the communication 
between the user and the system. The method assumes a secure one-way encryption 
function and can be implemented with a microcomputer in the user's terminal. 

Keywords: authentication, one-way function, passwords, security 
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lay E. Israel, Theodore A. Linden 

<July 1983 ACM Transactions on Information Systems (TOIS), Volume i issue 3 
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'1 2 Apache User. Aut 
Ibrahim F. Haddad 
October 2000 Linux Journal 

Full text available: hg] html(13.41 KB) Additional Information: full citation , abstract , references , index terms 

A guide to setting up user authentication for the Apache web server running on Linux, using 
the plaintext file method. 

^3 Protection and the control of information sharing in multics 
Jerome H. Saltzer 

July 1974 Communications of the ACi^, volume i7 issue 7 

Additional Information: fuJJ. cjtation, al?stract, references, cjtings, index 



Full text available: la pdf(1,75 MBJ 

terms 

The design of mechanisms to control the sharing of information in the Multics system is 
described. Five design principles help provide Insight into the tradeoffs among different 
possible designs. The key mechanisms described include access control lists, hierarchical 
control of access specifications, identification and authentication of users, and primary 
memory protection. The paper ends with a discussion of several known weaknesses in the 
current protection mechanism design. 

Keywords: Multics, access control, authentication, computer utilities, descriptors, privacy, 
proprietary programs, protected subsystems, protection, security, time-sharing systems, 
virtual memory 
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Brian Harvey 
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